{"schema_version":"1","data":[{"id":41953,"advisory_id":"e5731f12-c86e-4184-bace-38030f9f4065","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v12.22.1","source_published_at":"2021-04-06T20:09:43+00:00","published_at":"2026-10-25T11:37:22.729674+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2020-7774","CVE-2021-3449","CVE-2021-3450"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 12.22.1 (LTS)","summary":"Node.js 12.22.1 includes fixes for OpenSSL and npm-related vulnerabilities.","evidence":"Vulnerabilities fixed: CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT","products":[{"name":{"value":"Node.js","evidence":"Node.js 12.22.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"12.22.1","evidence":"Node.js 12.22.1 (LTS)"}],"affected_versions":[{"value":"12.x","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-3450","evidence":"CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT"},{"value":"CVE-2021-3449","evidence":"CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing"},{"value":"CVE-2020-7774","evidence":"CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":40600,"advisory_id":"63f99683-db23-4c65-a8dd-87dbf1bce849","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v14.16.1","source_published_at":"2021-04-06T20:09:51+00:00","published_at":"2026-10-25T11:05:52.454402+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2020-7774","CVE-2021-3449","CVE-2021-3450"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 14.16.1 (LTS)","summary":"Node.js 14.16.1 updates npm and OpenSSL and fixes listed vulnerabilities affecting Node.js release lines.","evidence":"Vulnerabilities fixed: CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)","products":[{"name":{"value":"Node.js","evidence":"Node.js 14.16.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"14.16.1","evidence":"Node.js 14.16.1 (LTS)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"},{"value":"All versions of the 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-3450","evidence":"CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)"},{"value":"CVE-2021-3449","evidence":"CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)"},{"value":"CVE-2020-7774","evidence":"CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":39735,"advisory_id":"f1b56b83-428e-48cd-81a5-4f8f788835e1","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/april-2021-security-releases","source_published_at":"2021-04-06T20:51:00+00:00","published_at":"2026-10-25T10:51:27.041456+00:00","extraction_method":"llm","technologies":["node-js","nodejs","npm"],"cve_ids":["CVE-2020-7774","CVE-2021-3449","CVE-2021-3450"],"event_types":["patch"],"payload":{"kind":"patch","title":"April 2021 Security Releases","summary":"Node.js security updates address OpenSSL certificate-check and signature-processing vulnerabilities, plus an npm y18n prototype-pollution issue. Updates are available for the listed Node.js release lines.","evidence":"Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.","products":[{"name":{"value":"Node.js","evidence":"Node.js v10.24.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"v10.24.1","evidence":"Node.js v10.24.1 (LTS)"},{"value":"v12.22.1","evidence":"Node.js v12.22.1 (LTS)"},{"value":"v14.16.1","evidence":"Node.js v14.16.1 (LTS)"},{"value":"v15.14.0","evidence":"Node.js v15.14.0 (Current)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"}]},{"name":{"value":"npm","evidence":"npm upgrade - Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"All versions of the 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-3450","evidence":"CA certificate check bypass with X509_V_FLAG_X509_STRICT (High) (CVE-2021-3450)"},{"value":"CVE-2021-3449","evidence":"NULL pointer deref in signature_algorithms processing (High) (CVE-2021-3449)"},{"value":"CVE-2020-7774","evidence":"Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":39635,"advisory_id":"16344be8-b7e4-4195-bc00-21d971c734b2","revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v10.24.1","source_published_at":"2021-04-06T20:09:17+00:00","published_at":"2026-10-25T10:49:22.632188+00:00","extraction_method":"llm","technologies":["node-js","nodejs"],"cve_ids":["CVE-2020-7774","CVE-2021-3449","CVE-2021-3450"],"event_types":["patch"],"payload":{"kind":"patch","title":"Node.js 10.24.1 (LTS)","summary":"Node.js 10.24.1 fixes vulnerabilities involving OpenSSL and npm’s y18n module.","evidence":"Vulerabilties fixed: CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)","products":[{"name":{"value":"Node.js","evidence":"Node.js 10.24.1 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"10.24.1","evidence":"Node.js 10.24.1 (LTS)"}],"affected_versions":[{"value":"All versions of the 15.x, 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 15.x, 14.x, 12.x and 10.x releases lines"},{"value":"All versions of the 14.x, 12.x and 10.x releases lines","evidence":"Impacts: All versions of the 14.x, 12.x and 10.x releases lines"}]}],"severity":"unknown","related_cves":[{"value":"CVE-2021-3450","evidence":"CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)"},{"value":"CVE-2021-3449","evidence":"CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)"},{"value":"CVE-2020-7774","evidence":"CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":41953,"next_before":39635}